Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | Sept. 21, 2024, 1:50 p.m. | Sept. 21, 2024, 1:56 p.m. |
-
66edcd212760d_set3.exe#lyla "C:\Users\test22\AppData\Local\Temp\66edcd212760d_set3.exe#lyla"
2644
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
resource name | MIVUMUBUGECATEZEHANENIX |
section | {u'size_of_data': u'0x00035000', u'virtual_address': u'0x00001000', u'entropy': 7.873226382519238, u'name': u'.text', u'virtual_size': u'0x00034e36'} | entropy | 7.87322638252 | description | A section with a high entropy has been found | |||||||||
entropy | 0.517073170732 | description | Overall entropy of this PE file is high |
Bkav | W32.AIDetectMalware |
tehtris | Generic.Malware |
Cynet | Malicious (score: 100) |
CAT-QuickHeal | Ransom.Stop.P5 |
Skyhigh | BehavesLike.Win32.Lockbit.gh |
Cylance | Unsafe |
Sangfor | Ransom.Win32.Save.a |
CrowdStrike | win/malicious_confidence_100% (D) |
Symantec | ML.Attribute.HighConfidence |
Elastic | malicious (high confidence) |
APEX | Malicious |
ClamAV | Win.Packer.pkr_ce1a-9980177-0 |
Rising | Trojan.Kryptik@AI.90 (RDML:efCqWaV4mL1SKoq02WdF4A) |
McAfeeD | ti!72B1C8D702A1 |
Trapmine | malicious.high.ml.score |
Sophos | ML/PE-A |
SentinelOne | Static AI - Malicious PE |
FireEye | Generic.mg.42924131895c1839 |
Detected | |
Microsoft | Trojan:Win32/Wacatac.B!ml |
Varist | W32/Kryptik.MIZ.gen!Eldorado |
DeepInstinct | MALICIOUS |
VBA32 | Trojan.Buzus |
Ikarus | Trojan.Win32.Crypt |
Tencent | Trojan.Win32.Obfuscated.gen |
MaxSecure | Trojan.Malware.300983.susgen |